WARNING: Google Discloses Windows Zero-Day Bug Exploited in the Wild

In The Hacker News - Original news source is thehackernews.com by Blog Writer

Post Sharing
Google has disclosed details of a new zero-day privilege escalation flaw in the Windows operating system that’s being actively exploited in the wild.
The elevation of privileges (EoP) vulnerability, tracked as CVE-2020-17087, concerns a buffer overflow present since at least Windows 7 in the Windows Kernel Cryptography Driver (“cng.sys”) that can be exploited for a sandbox escape.
“The bug